Releases

Features and breaking changes released in Actions are listed below.

v3

Login Flow

New features and breaking changes were released to triggers in the Login Flow. To learn about these changes, read Login Flow: Releases.

v2 (GA)

Query and body parameters

Direct access to the query and body parameters is available using the event.request.query and event.request.body objects. These are exposed regardless of whether the authorization was initiated via a GET or POST request. Many protocol-specific query or body parameters sent as part of an authorization request are now also available as first-class values on the event.transaction object. We recommend that you use event.transaction rather than event.request.query and event.request.body unless your use case is not supported. A complete mapping of these changes is below:

Pre-GA Property	GA Property
event.actor.ip	event.request.ip
event.actor.hostname	event.request.hostname
event.actor.geoIp	event.request.geoip
event.actor.language	event.request.language
event.actor.method	event.request.method
event.actor.userAgent	event.request.user_agent
event.actor.body	event.request.body
event.actor.query	event.request.query
event.actor.query.audience	event.resource_server.identifier
event.actor.query.scope	event.transaction.requested_scopes
event.actor.query.acr_values	event.transaction.acr_values
event.actor.query.ui_locales	event.transaction.ui_locales
event.protocol	event.transaction.protocol
context.secrets	event.secrets

User Profile properties

In general, the event.user object has had its properties changed from camel case to snake case in order to match the Auth0 User Profile structure. For example, event.user.appMetadata has been changed to event.user.app_metadata.

Performing side effects

In the pre-GA version of the post-login trigger, side effects were performed by returning an object from an Action. In Actions GA, an api object is provided to encapsulate these changes and provide better in-editor type hints and inline documentation.

To learn more about these changes and see code examples, read Login Flow: Releases.

Manipulating scopes

Although we experimented with providing direct manipulation of ID and Access Token scopes during the Actions Beta, we do not support this functionality in Actions GA.